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ABSTRACT 



A reprogrammable subscriber terminal of a subscription 
television service which can have the control program code 
of its control processor modified by downloading new 
program code from the headend. The control processor 
stores a boot program in an internal read only memory. Upon 
start up and resets, the boot program determines whether the 
control program should be changed from a command sent 
from the headend. The command, termed a parameters 
transactions, includes the number of expected download 
program code transactions required to complete the control 
code modification, the memory space areas where the code 
is to be loaded, and the charmel over which the download 
program code transactions are to be transmitted. The channel 
is tuned and when the boot program receives all the down- 
load program code transactions accurately and stores them, 
the boot program will cause the control program to be 
restarted at a selected address of the new or modified control 
program code which has been downloaded. The boot pro- 
gram may download code to different configurations of 
subscriber terminals including those with Flash EPROM or 
extended memories from plug-in expansion modules. 

49 Claims 14 Drawing Sheets 
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REPROGRAMMABLE SUBSCRIBER 
TERMINAL 

This is a continuation of application Sen No. 08/220,626 
filed Mar. 28, 1994, now U.S. Pal. No. 5,440,632, which is 
a file wrapper contimiation of parent application Ser. No. 
07/983,909 filed Dec. 2, 1992, now abandoned. 

This invention pertains generally to a subscriber terminal 
for CATV or other subscription television systems and is 
more particularly directed to a method and an apparatus for 
reprogramming a subscriber terminal. 

The subscriber terminal, more commonly known as a set 
top terminal, is an integral component of subscription tele- 
vision systems. These subscription television systems can be 
cable television (CATV) system, SMATV systems, multi- 
point, multi-distribution (MMDS) systems, or direct- to- 
home (DTH) systems. The terminals have conventionally 
provided the functions of tuning particular channels of the 
subscription television system which are outside the sub- 
scriber's television receiver capability. Further, they provide 
conditional access to the particular subscription service 
through authorization codes and in many services provide 
tiering or authorization of particular channels of the service 
by descrambling. 

More recently, the subscriber terminal has become user 
friendly by providing an interactive, on-screen display and 
other user functions that allow the subscriber to manipulate 
the subscription service and his television receiver in addi- 
tional ways. These features include such things as volume 
control, pay-per-view event confirmation, favorite channel 
listings, sleep timer features, parental control capability, 
messaging, program timers for recording VCR programs, 
and other consumer friendly operational features. 

In addition, some of the features found in newer televi- 
sion receivers can be provided for older receivers by the 
subscription terminal. For example, channel identifiers, 
mute and volume control can be accomplished by the 
subscriber terminal making the subscriber's television 
receiver appear to be a newer model with these capabilities. 

An advantageous example of a subscriber terminal with 
these advanced consumer features is the 8600 model series 
of subscriber terminals manufactured by Scientific- Atlanta, 
Inc. of Norcross, Ga. 

Currently, these subscriber terminals are controlled by 
programmable microcontrollers which have their control 
programs stored in a read only memory (either integral with 
the microprocessor or included in a separate integrated 
circuit) or stored in a separate non-volatile memory such as 
an EPROM or a battery backed up RAM. With the current 
programming methods, the control program of the sub- 
scriber terminal can only be changed by removing the 
memory device (or the device incorporating the memory) 
and replacing it. This method is very inconvenient and 
expensive for changes which are to be made to subscriber 
terminals as it means a home visit from the service personnel 
of the subscription service provider. Subscription television 
systems may have several hundred thousand subscriber 
terminals which may need such upgrades. 

Therefore, it would be advantageous to be able to repro- 
gram the subscriber terminals of a subscription television 
service to change on screen parameters, change subscriber 
interfaces, add new features, and modify the control pro- 
gram from a remote location. 

SUMMARY OF INVENTION 

The invention provides a method and an apparatus for 
allowing a subscriber terminal of a subscription television 
system to be reprogrammed. 
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The preferred implementation of the subscriber terminal 
includes a control microprocessor which includes at least a 
read only memory (ROM) and random access memory 
(RAM) which is internal to the microprocessor chip. The 

5 memory capability of the microprocessor additionally 
includes several pages of Flash EPROM memory in 64k 
blocks which can be mounted internally to the subscriber 
terminal or externally in the form of plug-in modules. The 
memory space may include other types of memory which 

10 can be reprogrammed. 

The subscriber terminal further has a multifunction con- 
trol circuit (MCC) which controls the input of data to the 
subscriber terminal firom the headend of the subscription 
television system. The MCC controls a plurality of decoders 

^5 for in-band video data, in-band audio data, and out-of-band 
data which it buffers in a volatile memory area. The data 
which the subscriber terminal receives occurs in defined 
transactions between the headend and the subscriber termi- 
nal. Among the multiplicity of transactions between the 

20 headend and subscriber terminal are several to download 
program code parameters and another to download program 
code from the headend into the memory space of the control 
microprocessor. This capability provides a means to change 
the control program of the control microprocessor to either 

25 upgrade it, add additional features, disable obsolete features, 
or to correct the performance of certain routines of the 
control program. 

In the preferred embodiment, the ROM of the control 
microprocessor is but a small part of the overall memory 
space of the processor and contains a loader program and, 
optionally, several kernel routines. This system code, col- 
lectively termed the boot program, is the only part of the 
memory space which is static and cannot be reprogrammed. 
In an ahernative embodiment, the boot program further 

■^^ contains a revision number so that the control microproces- 
sor may be upgraded by replacement and matched with 
reprogrammed control program code if so desired. The 
subscriber terminal is adapted to receive a download pro- 
gram code parameters transaction from the headend which 
describes the new control code which is to be downloaded 
into the memory space of the subscriber terminal. The boot 
program then utilizes these parameters to receive a plurality 
of download program code transactions which contain the 
program code to be stored. 

In the illustrated implementation, the download program 
code parameters transaction indicates the expected number 
of download program code transactions that are to be 
received by the subscriber terminal, the channel of the 
subscription system (in-band or out-of-band) where the 
information is to be found, and the memory space into which 
it should be stored. 

The boot program receives a plurality of the download 
program code transactions, possibly multiple times. Once a. 

55 download program code transaction is accurately received, 
the program code will be stored in the memory space 
reserved for it and the count of expeaed transactions dec- 
remented. When all the transactions for a particular repro- 
gramming operation have been received, the expected irans- 

5Q action count wiU be zero and thereby indicate that the 
downloading operation is complete. In this manner, the 
downloading operation may be accomplished efiBciently 
even if one or several transactions arc not received the first 
time they are transmitted. 

65 In accordance with another aspect of the invention, the 
download parameters transactions can be individually 
addressed, group addressed or globally addressed while the 
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actual download program code transactions are globally 
transmitted. This operation permits a small set of 
transactions, the program code parameters transactions, to 
direct the storage of a much larger set of transactions, the 
program code transaction. This dramatically decreases the 5 
time it takes to encode and decode addressed transactions in 
the system. This provides for further cfiBciencics in rcpro- 
gramming only certain subscriber terminals or groups of 
subscriber terminals. 

Moreover, the program code parameters transactions may 
contain a program code revision identifier in order to pro- 
vide other selective criteria on which to determine which 
subscriber terminals are reprogrammed. In this manner, a 
current program code version may be periodically transmit- 
ted from the headend to update all terminals for system ^5 
revisions and to initially program new terminals as they are 
added to the subscriber base. The system operator is then 
assured that the entire subscriber base is operating with the 
same program and that revising a terminal's software and 
initially loading the software do not have to be accomphshcd 20 
by different methods. 

According to another a^ect of the invention, the program 
code parameters transactions define the memory space des- 
tination to which the new program code is to be downloaded. 
Conveniently, the memory space may be divided into con- 25 
tiguous areas such as a 64k bytes, which physically may be 
separate integrated circuits. This permits selected memory 
chips to be downloaded rather than the entire memory space. 
This aspect is advantageous when particular types of 
memory chips are used such as Flash EPROM memory 30 
which must be entirely erased before being rewritten. With 
this method, only those memory chips which need to be 
changed are erased. 

The memory space definition may also include a desig- 
nation concerning whether the program code which is to be 35 
downloaded is to be stored in an internal memory, an 
external memory, or both. The preferred subscriber terminal 
has an expandable memory space which can be augmented 
with plug-in modules. By being able to direct the down- 
loaded code to either the internal or external' memory, a 40 
choice can be made of where to store certain basic control 
routines as opposed to supplemental features. For example, 
a core of control routines which provide a basic features set 
of the subscriber terminal can be stored internally. Other 
features which are special, or are individually or group 45 
directed, can be stored externally. This produces an advan- 
tageous subscription television system where all the sub- 
scriber terminals have a certain common capability based on 
a common control program loaded into the internal memory 
space. If the subscriber or subscriber group does not desire 50 
or need any of a special or additional features set, the plug-in 
modules need not be present and their cost saved. 

BRIEF DESCRIPTION OF THE DRAWINGS 

These and other objects, features and aspects of the 55 
invention will be more clearly understood and better 
described if the following detailed description is read in 
conjunction with the appended drawings wherein: 

FIG. 1 is a system block diagram of a subscription 
television system of the CATV type which includes a 
multiplicity of subscriber terminals; 

FIG. 2 is a detailed block diagram of one of the subscriber 
terminals of the system illustrated in FIG. 1; 

FIGS. 3A-3D are pictorial representations of several 
download program code parameters transactions which the 65 
system uses to request the downloading of new program 
code to the subscriber terminal illustrated in FIG. 2; 
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FIG. 4 is a pictorial representation of the download 
program code transaction which the system uses to down- 
load program code which will supplement or replace pro- 
gram code in the memory space of the subscriber terminal 
illustrated in FIG. 2; 

FIG. 5 is a detailed electrical schematic diagram of the 
memory architecture of the subscriber terminal illustrated in 
FIG. 2; 

FIG. 6 is a detailed memory map of the memory space 
created by the architecture illustrated in FIG. 5; 

FIG. 7 is a pictorial representation of the separation of 
internal and external memory for the subscriber terminal 
illustrated in FIG. 2; 

FIGS. 8A and 8B are a detailed flow chart of the boot 
program stored in the internal ROM of the control micro- 
processor of the subscriber terminal illustrated in RG. 2; 

FIG. 9 is a detailed flow chart of the program code which 
stores the download program code parameters transactions 
for the subscriber terminal illustrated in FIG. 2; 

FIG. 10 is a detailed flow chart of the program code which 
the control microprocessor executes in the off mode of the 
subscriber terminal illustrated in FIG. 2; 

FIG. llAis a perspective front view of the expansion card 
138 illustrated in FIG. 2 with its protective door closed; 

FIG. IIB is a perspective front view of the expansion card 
138 illustrated in FIG. 2, with its protective door open; 

FIG. 12 is a perspective pictorial of the subscriber termi- 
nal 40 receiving an expansion card 138 in accordance with 
the invention; and 

FIGS. 12A-12C are fragmented side perspective views of 
the subscriber terminal illustrated in FIG. 12 with a snap on 
cover protecting the expansion slot of the terminal, with the 
slot open, and the expansion card inserted in the slot; 

FIGS. 13A and 13B are fragmentary side views, shown 
partially cross-sectioned, of the expansion card partially 
inserted and fully inserted in the carrier of the subscriber 
terminal shown in FIG. 12. 

DETAILED DESCRIPTION OF THE 
PREFERRED EMBODIMENT 

A subscription television system of the CATV type is 
more fully illustrated in FIG. 1. The subscription television 
system includes a headend 10 and a plurality of subscriber 
terminals 40, 44 and 48 which are connected over a distri- 
bution system 52. As is conventional, the distribution system 
52 may include coaxial or optical fiber cable, system 
amplifiers, line extenders, etc. The headend 10 is under the 
supervision of a system manager 12 which controls a 
hardware controller, headend controller 22. A billing com- 
puter 11 communicates with the system manager 12 to 
authorize and transmit transactions to subscribers. 

The television or other programming for the subscription 
system may come from a satellite downlink where it is 
decoded and demodulated by satellite receivers 18 into a 
number of channels. Each channel is either applied to a 
modulator 24 and 30 or a scrambler and modulator 26 and 
28 which, under the control of the headend controller 22, 
remodulates the channels to the frequencies of the local 
subscription system channel line up. For a premium or 
restricted channel service (tiered, pay-per-view, or the like), 
some channels are scrambled by any of the known CATV 
methods by the scramblers and modulators 26 and 28, while 
the other channels can be transmitted without conversion. 
The program channel are then frequency division multi- 
plexed onto the distribution system 52 by an RF combiner 34 
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as a broadband television signal. The plurality of channels of 
programming can then be transmitted over the distribution 
system 52 and supplied to each of the subscriber terminals 
40, 44, and 48. 

The scramblers and modulators 26 and 28 further may 
include the function of data insertion for its particular 
channel. This method of providing the data within the 
channel signal is generally termed in-band signaling. The 
data may be applied to any audio portion, video portion or 
both audio and video portions in combination, or any other 
portion of the television channel. Many subscription televi- 
sion systems have amplitude modulated data pulses on the 
audio subcarrier Further, in other subscription television 
systems, data may be inserted into the vertical and/or 
horizontal blanking intervals of the video portion. 

The data which is inserted into the television channel in 
this manner can be conditional access data to globally or 
locally address and control the subscriber terminals 40, 44 
and 48, on screen text data, or other types of information 
from the headend controller 22. Other data and information, 
such as electronic program guides and information services, 
can be inserted into the channels from a data controller 20. 
The data controller 20 can receive local data or national data 
from the satellite downliiik through the satellite receiver 18. 

In addition, data can be transmitted over the distribution 
system 52 by out-of-band signaling. In this mode, the system 
manager 12 accesses an addressable transmitter 32 with 
transactions to transmit this data. The addressable transmit- 
ter 32 may be used to modulate a data signal on a frequency 
not associated with the television programming. The broad- 
band television programming of the cable systems has 
generally been applied from 50 MHz to 550 MHz and above, 
while out-of-band signaling systems have been used in 
non- video portions of these signals, such as at 108.2 MHz 
with a frequency shift keying modulation technique. These 
transactions are combined with the broadband television 
signal at 36 and transmitted to the subscriber terminals 40, 
44 and 48. 

Transactions in the system are designated as addressed (to 
a particular subscriber terminal or group of subscriber 
terminals) and global (to all subscriber terminals). These 
transactions are in a standardized format which can be sent 
over any of the communication paths mentioned. 

Signahng and data information may also flow in the 
reverse direction from the subscriber terminals to the hea- 
dend via a reverse signaling path through the distribution 
system 56. In one form, the reverse signals are digital 
biphase shift keying (BPSK) modulated and applied to a 
frequency below 50 MHz. The signals flow back from the 
subscriber terminals to an IPPV processor where they are 
decoded. In addition, any of the subscriber terminals 40, 44 
and 48 may include a modem and telephone link 52 to a 
telephone processor 16 at the headend 10. The information 
from processors 14 and 16 are directed to the system 
manager 12, which communicates to the billing computer 11 
to obtain authorization and billing information. The reverse 
signaling system has generally been used for ordering pay- 
pay-view (PPV) or impulse -pay-per-view (IPPV) events. In 
the future the reverse signal path may be used for any 
number of additional interactive services. 

Referring to FIG. 2, a detailed block diagram of one of the 
subscriber terminals, for example, the one indicated as 40 of 
the subscription television system will now be described. 
The broadband television signal from signal distribution 
system 52 is received at the input of up/down converter or 
tuner 100. An out-of-band data receiver 150 is also coupled 
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to the broadband input. Conventionally, the up/down con- 
verter 100 may include an input filter, such as a diplexer, to 
separate the 108.2 MHz out-of-band signal and the broad- 
band television signal. The up/down converter 100 can be 
5 tuned to a predetermined channel for receiving in-band 
video and audio data when not in use. The channel may be 
predetermined from the system manager 12 and, by one of 
the data transmission methods described herein, the prede- 
termined channel identification can be stored in subscriber 
terminal 40. 

When in use, the up/down converter 100 is tuned accord- 
ing to a channel entered by a subscriber via a user interface 
having an IR receiver 124, remote control 126 and terminal 
keypad 122. Up/down converter 100 uses a phase locked 
loop wider the control of a tuning control 102 to convert the 
selected or predetermined default RF channel signal to a 
45.75 MHz intermediate frequency signal. A multifunction 
control circuit (MCC) 104, preferably an application specific 
integrated circuit (ASIC) combining many subscriber ter- 
minal control and data handling functions into a single 

20 package, is linked to up/down converter 100 by a bidirec- 
tional link to the tuner control 102. The link has one path for 
tuning and a return link for feedback control of the tuning 
process. A feedback signal for automatic gain control and 
one for automatic frequency control are transmitted to the 

25 up/down converter 100 through filters 101, 103, respectively 
from a video demodulator 109. 

A filter, such as a SAW filter 106, filters the IF channel 
signal to split the signal into separate video and audio 
portions for further processing. The video portion is 

30 demodulated and descrambled by the video demodulator 
109 under the control of a descrambler control 110 of the 
MCC 104. The video demodulator 109 performs the sync 
restoration (descrambling of the video signal) for sync 
suppression scrambling. The video signal then passes 

35 through a band pass filter 130 and to a video inverter 132 
where inverse video inversion (descrambling) takes place. 
The descrambling of the video portion, whether sync 
suppression, sync inversion, video line inversion, etc. is 
under the control of the descrambler control 110 of the MCC 

40 104. The descrambler control 110 provides the necessary 
timing signals, inversion axis levels, and whether the video 
is inverted or not to the video inverter 132 and supplies the 
necessary timing, restoration levels and identification of 
sync pulses to be restored to the demodulator 109. The 

45 descrambler control 110 usually receives such descrambling 
information from pulses as in-band audio data. 

In the other path, the audio signal is converted from the 
41.25 MHz IF carrier to the intcrmodulation frequency of 
4.5 MHz by a synchronous detector 105. Feedback for 

50 automatic gain control of detector 105 is supplied from the 
output of band pass filter 131. The audio signal may then be 
demodulated by an FM demodulator 119. An amplitude 
modulation detector 111 performs pulse detection to recover 
the in-band audio data which are amplitude modulated onto 

55 the audio carrier. The recovered in-band pulses are supplied 
to an in-band audio data decoder 117 of MCC 104 for 
processing after being shaped by pulse shaper 115. The 
in-band data, except for descrambling data, is stored in 
DRAM 137 for buffering. Descrambler control 104 accesses 

60 descrambling data directly for the video descrambling 
operation. Volume control of the audio signal is performed 
under the control of a volume control 118 of the MCC 104 
and the microprocessor 128 as described in U.S. Pat. No. 
5,054,071, incorporated herein by reference. After volume 

6S control, the audio signal is passed through a low pass filter 
123 and a mute switch 125. The output of the mute switch 
125 is applied to a modulator 142. 
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The MCC 104 receives the video signal after demodula- read-only memory internal to the processor and partially 

tion and descrambling and strips the in-band video data from stored in a non-volatile memory such as Flash EPROM 

the VBI of the signal with a VBI decoder 129. The in-band memory 134. In addition, the control program of the control 

video data is transmitted at a frequency on the order of microprocessor 128 may also reside in the non-volatile 
known teletext systems, such as about 4.0 megabits per 5 memory of an expansion card 138. The miaoproccssor 128 

second, and a data dock provides an appropriate sampling communicates with the non-volatile memory 134 and 138 

frequency higher than the Nyquist rate according to well via a memory bus 141 which has data, address, and control 

known techniques. The in-band decoder 129 stores the data lines. In addition, the microprocessor 128 controls the data 

in DRAM 137 prior to processing by the microprocessor decoders 117, 129 and 146 and the tuner control 102, volume 
128, the DRAM 128 serving as a data buffer. lO control 118, on screen display control 127, descrambler 

The output of video inversion circuit 132 is also suppHed control 110 and input key scanner and control 148 via 
to an on screen display control 127 of the MCC 104. The on commands through MCC 104 and control microprocessor 
screen display control 127 selectively generates on screen bus (CMB) 131. The microprocessor 128 also direcUy 
character and graphic displays in place of or overlaid on the controls the mute switch 125 and the output frequency 
video signal. The modulator 142 combines the video signal 15 selection of the modulator 142. The microprocessor 128 
from the output of the on screen display control 127 and the includes additional capacity for other auxiliary device corn- 
audio signal from the output of the mute circuit 125 and munications and control through a data port 140. 
converts the combined signal to the channel frequency The memory control 112 permits data coming from the 
selected by the microprocessor 128, such as channel 3/4 for three data decoders 117, 129 and 146 to be placed in a 
NTSC. The combined and remodulated signal is supplied as 20 volatile memory such as DRAM 137. There it can be 
an RF output to a television receiver in well known manner. accessed by the control microprocessor 128 via the CMB 

A control microprocessor 128 controls the overaU opera- 131. The MCC 104 also distributes control instructions from 

tion of the subscriber terminal 40. The subscriber commu- the control microprocessor 128 to the other parts of the MCC 

nicates to and controls the microprocessor 128 through an 1^ lo provide operation of the rest of the subscriber 

interactive user interface with an on screen display. The user tenminal 40. The MCC 104 additionally connects to a secure 

interface includes a keyboard 122 on the front panel of the microprocessor bus (SMB) 143 which permits communica- 

subscriber terminal 40 and the remote 126 which generate tions between the secure microprocessor 136 and other 

subscriber control signals for channel timing, volume level portions of the subscriber terminal 40. The SMB 143 is 

control, feature selection, and the like. These subscriber further coiipled to the expansion card 138 to provide renew- 

control commands are decoded by an input scanner and ^^1^ security. 

control 148 of MCC 104. The remote IR receiver 124 of the The memory control 112 and microprocessor interfaces of 

user interface receives the commands from the infrared (IR) the MCC 104 are the central communications facility for the 

or other remote control 126, as is well known in the art, and control microprocessor 128 and the secure microprocessor 

provides commands to the microprocessor 128. The user 136. The memory control 112 receives requests to write to 

interface additionally includes a 4 digit, 7 segment LED memory or read from memory from the microprocessors 

display 120 which displays the tuned channel numbers and 128, 136 and the other controls and data decoders. It resolves 

diagnostics. contentions for memory transfers, giving priority to real 

When the keypad 122 or IR remote control 126 is utilized applications and the microprocessors, and schedules 

to select a command, the microprocessor 128 operates to data flow. The microprocessors 128 and 136 communi- 

execute the command. For example, this operation may be cat© through internal registers of the MCC 104 with the 

to instruct the mner control 102 to appropriately control memory control 112 and other portions of the MCC 

up/down converter 100 to tune a selected channel. The The expansion card 138 is a printed circuit card which 

subscriber terminal interacts with the subscriber by provid- contains memory and/or secure microprocessor 

ing numerous on screen displays which assist in the opera- components, which can be plugged into a connector 200. 

tion of the terminal. The on screen displays provide infor- The connector 200 electrically extends the control micro- 

mation and prompts to guide the subscriber through many of processor memory bus 141 and the secure microprocessor 

the complex features of the terminal. bus 143 to the ejq)ansion card 138. Additional program or 

The descrambler control UO of the MCC 104 utilizes data memory, or renewed security can be provided by the 
recovered descrambling data to generate appropriate control 50 expansion card 138. 

signals, for example, inversion control and equalizing, sync The subscriber terminal may optionally include an 

restoration or regeneration for descrambling, or otherwise impulse pay-per-view (IPPV) module of either the telephone 

restoring the input baseband television signal. A secure type 152 or the RF-IPPV type 154. The IPPV module allows 
microprocessor 136 determines whether the descrambler . the subscribers to request authorization of their subscriber 
control 110 of MCC 104 carries out descrambling on a 55 terminal 40 to receive pay-per-view events, store the data 

particular channel or what form of descrambling is required associated with the purchase of the event in the non-volatile 

at a particular time by interpreting the authorization and memory of the secure microprocessor 136, and then transmit 

control data downloaded from the system manager 12 (by the data to the system manager 12 via the telephone return 

any of the three data transmission schemes discussed herein, path or the RF return path via the signal distribution system 
out-of-band, in-band audio or in-band video) into the inter- 50 

nal NVM memory of the device. The non-volatile memory The memory space of the subscriber terminal can be 

(NVM) in the secure microprocessor 136 stores secure data, downloaded with new program code through a series of 

for example, authorization data, scrambled channel data, transactions including a download parameters transaction 

scrambling mode data, some terminal configuration data and and a download program code transaction. The download 
other required data. 65 parameters transaction for the subscriber terminal illustrated 

The control microprocessor 128 operates by mnning a in FIG. 2 is more fully shown in FIGS. 3A-3D. The 

control program which preferably is partially stored in a download parameters transaction is 22 bytes in length and 
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has four versions. A first version (FIG. 3A) is for external first byte is loaded at this address in the destination bank and 

memory configurations and a second version (FIG. 3B) is for the following bytes loaded sequentially in the same 

internal memory configurations. Either of these transactions sequence that they are stored in the transaction. In this 

may be addressed (FIGS. 3A, 3B) or global (FIGS. 3C, 3D) manner 16 banks of 64k memory can be reloaded by a very 

to provide versions three and four. 5 simple transaction. Bytes 5 has a nibble which indicates that 

-ru^ ^^A^^^^^A ♦ the transaction is directed to the control microprocessor 128 

The addressed version of the download parameters trans- , . . i r ^ ^ i i 

^ . , ^ „ '11 u and the second nibble of the byte indicates the kernel 

action for external memory configurations will now be more - - r *u * *■ t> .* r • j- * *u * 

- , ..J \^ Jij^ lAT^^iri- revision for the transaction. Byte 0 mdicates the transaction 

fully descnbed with respect to FIG. 3A. Bit 1 of byte 0 of ■ j i j j / *• n ^ ^ '>i .u 

. . . ^, . . J, , ^ . IS a download program code transaction. Bytes 6-21 are the 

me transaction indicates that it is an addressed transaction, ^^(^^, ^, ^^^^ downloaded to the 

'^.^"^^ I ^Tu f of addre^ng capability. 10 ^^^^^ microprocessor memory space. Each transaction 

Additionally, byte 4 has a least sigmticant nibble which adds k u,^/^ *u« . ^ «^ «f tu« 

. • r 1 , • t r™ . . loads 16 bytes or code into the memory space oi the 

4 more bits of addressing capabihty. Thus, the transaction subscriber terminal 40. 

may address 2^® subscriber terminals in the customer base of » [ n j 

. - ^. ^ * ■ -c * uLi • L .* In this manner a large amount of program code (1 

the subscription system. The most significant nibble in byte ^ i5 t ^ ^ : 

^ ■ . . * megabyte) can be efficiently and accurately downloaded to 

4 includes a code 0100 which mdicates the transaction isi^ &J/ 1m - i^/^t^.- 

, , , ^. . T> * ff • J the memory space of the subscriber terminal 40. By having 

directed to the secure microprocessor 136. Byte 5 IS reserved , i , . _ ... jj . 

f„ „„„4*„„ -j^^^-fi^ * the download parameters transaction either addressed or 

for a transaction identifier code which mdicates it is an i . i . . , . , . ,, r • . 

„^^™.co^ /oAiyr\ global, mtemal or external, the system allows for an eflScient 

external, addressed, parameters transaction (EAPT). jj • o ... . . . 

/ . ^ addressing of the program code to cither all terminals, a 

After this header information, bytes 6-19 provide param- g^Q^p of terminals or even a single terminal. By indicating 

eter definition information concermag the downloading of ^j^i^h code revision is acceptable to the terminal and 

program code to the memory space. The least significant indicating the code revision in the download transaction, the 

nibble in byte 6 mcludes a code that identifies the kernel addressed terminals may even be further downloaded with 

revision for the boot program in the microprocessor 128. different revisions or the same revision for a different 

Bytes 7 and 8 mdicate the number of the starting bank and microprocessor. Also the inclusion of the kernel revision 

number of the ending bank for the external memory. Bytes ^.^yidts for the update of the control microprocessor 128 or 

9 and 10 are the first address of the starting bank of external ^ new model to allow compatible code conversion, 

memory and bytes 11 and 12 are the last address of the end Moreover, the distinction between internal and external 

bank of external memory. Byte 13 is the program code memory can be used to direct program code as necessary, 

revision number and bytes 14 and 15 are the expected NormaUy, the headend 10 will be constantly broadcasting 

number of downloadable transacUons that it will take to load ^ ^^^^^^^ ^^^^^^ ^^^^ subscriber terminals 

the code. Bytes 16 and 17 indicate the frequency of the ^^^^^y advantageously can be 

channel on which the downloadable prograna code transac- ^^^^^^ ^^^^^^ ^ ^ ^^^^^ j^^,^^^ parameters 

tions will be transmitted Byte 18 is an mdication of the transaction which may indicate it is for internal or external 

volatJe memory size, m this case the si2^ of the DRAM 137. ^^^^^^ ^^^^^^^^ ^ ^^^^ ^^^^ subscriber base are 

Byte 19 is an mdication ot whether the system is command- automaticallv downloaded with the correct software by these 

mg an immediate software download or whether the down- transactions. Code revisions to the entire subscriber base can 

loadmg should occur sometime m the future. ^^^^ ^ ^j^^^ download parameters transaction with 

The addressed download parameters transaction (FIG. a new revision number stored therein. The system supports 
3B) for the internal memory (lAPT) is identical in the header ^ different kernel revisions so that different models of sub- 
section (bytes 0-4) to the addressed transaction for external scriber terminals may be used in the same system. The 
memory (FIG. 3A). The structure is also similar in that there addressed parameters transactions may then be used to reach 
are indications in bytes 7-12 for the internal starting bank smaller groups, or even single terminals, with special soft- 
and internal ending bank, along with their first address and ^vare. It is envisioned that the headend will broadcast several 
last address. Additionally, the program code revision for the versions of software simultaneously and the download 
internal memory is stored in byte 13 of the transaction and parameters transactions will be used to allow the subscriber 
the expected number of downloaded program code transac- terminals to select the one for its particular purpose, 
tions is provided in bytes 14 and 15. The footer (bytes The memory space and memory control of the subscriber 
16-21) are also sunilar to the mtemal transactions. terminal 40 will now be more fully described with reference 

The global download parameters transaction versions 50 to the schematic in FIG. 5, The memory space of the control 

(FIGS. 3C, 3D) of the addressed transaction versions differ microprocessor 128 is shown as 1 megabyte in length. The 

only by having a zero in bit 1 of byte 1, no address, and control microprocessor 128 uses address lines A0-A19 to be 

different transaction identifiers. The parameters definitions, able to reach this size of memory in blocks or pages of 64k 

bytes 6-21, contain the same data in the same format for bytes. Addresses A0-A15 addresses found on. a particular 
both addressed and global transactions. 55 64k page which are then designated by the extended 

The download program code transaction is more fiilly addresses A16— A19 from MCC 104. 

illustrated in FIG. 4. The first bit in Byte 1 is a zero The physical memory of the memory space can be cither 

indicating that the download program code transaction is a internal or external. Internal memory for this implementa- 

global transaction. The transaction could be addressed but tion means fixed and not removable. The external memory 
sending large amounts of addressed transactions taxes the 60 for this implementation indicates memory space which can 

system assets. Byte 2 of the transaction indicates the code be expanded by adding one or more modules of removable 

revision number. Byte 3 indicates the destination bank memory. In the preferred embodiment, this is accomplished 

(page) for the particular memory configuration and the most by an expansion connector 200 which accepts an external 

significant nibble in byte 3 and all of byte 4 are used for plug- in module. The expansion can take the form of an 
address bits 4-15 of the bank. Because there are 16 bytes of 65 expansion card connector or individual plug in connectors 

code in each program code transaction, the destination which will receive printed circuit boards mounting the 

address points to the first address of a 16 byte segment. The modules on board. 
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The control microprocessor 128 generates the page 
addresses A0-A15 from 2 bidirectional 8 bit I/O ports PB 
and PC, The microprocessor 128 time multiplexes the port 
C lines to be both address and data lines AD0-AD7 and 
applies them to a data latch 202 which maintains the address 
word while it reads data from the same lines. The address 
lines are applied to the address inputs A0-A15 of the internal 
memory 134, in FIG. 5 a 256k Hash EPROM (pages 0-3). 
Data from the memory 134 is output from its data outputs 
D0-D7 on the port C data lines AD0-AD7. The extended 
address lines Al 6 and A17 needed by the memory to address 
the 64k pages of memory are provided by the MCC 104 to 
determine page assignment. Additionally, the MCC 104 
provides the control signals to the chip enable input *CE, 
output enable input *0E, and write enable input *\VE to the 
memory device 134. 

The microprocessor 128 communicates with the MCC 
104 over a serial bus with a transmit line connected to the 
address in input ADIN and a receive line connected to the 
address input ADOUT An address clock on line ACLK 
provides a clock signal to synchronize the transfer of data 
between the microprocessor 128 and MCC 104. A chip 
select signal ACS is used to select the MCC 104 and to 
separate control data. The MCC 104 also has a connection 
to the enable output E, and the read/write memory line RAV 
of the microprocessor 128, The MCC 104 further provides 
a master clock signal CLKl to the XTAL input of the 
microprocessor 128 to run the device. The MCC 104 pro- 
vides a data ready signal INT which is coupled to the 
interrupt input of microprocessor 128 to indicate that trans- 
action data has been received and is stored in DRAM 137. 

The DRAM 137 is controlled by the memory controller 
112 of MCC 104 via address lines A0-A9, row address 
strobe *RAS. column address strobe *CAS, and a write 
enable signal *WE. Data in 4 bit half bytes is read from and 
written to the data terminals D1-D4 of the memory device 
by the memory controller 112, The output enable input *0E 
and ground input to the DRAM 137 are groimded. The 
secure microprocessor 136 communicates over the secure 
microprocessor bus (SMB) with the MCC 104. The SMB 
comprises 4 input/output data lines SD0-^D3 and a serial 
clock Une SCLK to time the communications. The memory 
controller 112 additionally provides a master clock CLK2 to 
run the secure microprocessor 136. 

Extensions of the control microprocessor memory bus 
141 are provided by the memory extension connector 200. 
This extension connector is a 34 pin, edge connector which 
can be connected to other printed circuit boards within the 
subscriber terminal cover (on board) or provided to plug-in 
devices external to the subscriber terminal such as the 
expansion card 138, The expansion connector includes the 
address and data bus of the microprocessor 128, lines 
AD0-AD7 and Unes A8~A15. Further, the extended address 
lines A16-A19 are provided to the extension connector 200 
from the MCC 104. In addition, the expansion connector 
200 is electrically coupled to the SMB 143, which provides 
the serial clock SCLK and input/output data lines SD0-SD3 
to devices coupled to the connector. Still further, control 
lines from the microprocessor 128 including the enable 
output line E, the read/write line RAV, and the address strobe 
line AS are coupled to the connector 200, The microproces- 
sor 128 reads an input port line PAO to tell whether the 
expansion card 138 is inserted in the connector. The input 
port line is connected to a pin of connector 200 which can 
be grounded when the expansion card 138 is inserted. The 
expansion connector 200 is supplied with +12 V, +5 V power 
connectors and ground for the circuit components on the 
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expansion card 138. In this manner, those devices which are 
inserted in one or more connectors coupled to the extension 
connector 200 appear to be electrically present in the 
memory space of the subscriber terminal 40, 

5 Thus, the memory can be divided into internal and exter- 
nal memory as seen in FIG. 7 where, based on the feature set 
and the length of the control program, the internal memory 
134 can be reduced to a minimum. Additional feature sets or 
special features for only certain subscribers or groups of 

10 subscribers then may be provided by plug-in modules with 
the additional costs born by those subscribers benefitting and 
paying for the additional features. The connector 200 can 
support multiple modules or a single module such as expan- 
sion card 138. The expansion connector 200 also provides 

15 for renewable security by providing the secure micropro- 
cessor bus SMB 143 as a connection to the expansion space. 
Another secure microprocessor, such as that illustrated as 
201, can be plugged into the connector 200 as an on board 
module or mounted on the extension card 138. The system 

20 reset line R is connected to the expansion connector 200 and 
the microprocessor 201. This secure microprocessor 201 
may then take the place of (or supplement) the operation of 
the secure microprocessor 136 in the system. 

FIG. 6 illustrates the configuration of the memory space 

25 of the control microprocessor 128. The space is configured 
into 64k blocks or pages of memory of which there are 16 
blocks, 0-15. Each memory block addresses 0000- FFFF 
hexadecimal and generally is implemented by a single 
integrated circuit device, either a ROM memory, a battery 

30 backed up RAM memory, a Flash EPROM memory, or 
EEPROM memory. This address separation makes it easier 
to control the process of executing the control program and 
enabling the devices. The total memory size in this appli- 
cation may be up to 1 megabyte and is configured in this 

35 manner for convenience. It is evident that additional 
memory or a different configurations can be made to the 
memory space without varying the invention. 

Each memory block has certain reserved spaces for sys- 
tem operation including addresses 7000-7FFF hexadecimal 

40 (hex). This partition is used as internal memory space to the 
control microprocessor 128 and contains a boot program. 
Additionally, at address 7F7F hex, the code contains the 
reset address and the revision code number of the particular 
microprocessor and boot program. Addresses 0000-0040 

45 hex are reserved for the hardware registers of the control 
microprocessor 128 and the memory space 0041-OOFF hex 
is reserved for the internal random access memory of the 
control microprocessor 128. These addresses arc unusable in 
any of the other pages and refer only to the internal physical 

SO memory space of the control microprocessor 128. In 
addition, the 16 memory spaces at the end of each page, 
FFOO-FFFF hex, are used to store interrupt vectors and the 
revision of the present program control code. Memory space 
from 0100-6FFF and SOOO-FEFF hex is used to provide 

55 Space for the control program of the microprocessor 128. 
This memory space may be downloaded by the method 
described herein, Further, the memory space of these pages 
may be internal (located on a printed circuit board in the 
subscriber terminal 40), external (supplied on the expansion 

60 printed circuit card 138), or both. Any combination of types 
of memory may be used to advantage and the invention 
should not be hmited to a particular hardware configuration. 
Preferably, however, the subscriber terminal 40 has 1-16 
pages of Flash EPROM memory which can be downloaded 

65 by the technique herein described. The implementation 
shown illustrates 4 pages of internal Flash EPROM memory 
with extra pages being mounted extemaUy. The additional 
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pages 4-15 can be located on board in plug-in modules or on If neither external ROM nor internal ROM only is present, 

the expansion card 138. that means that the system should start from an address in 
The control microprocessor 128 contains the boot pro- downloadable section of the memory space, in which the 

gram in its internal ROM which, upon start up or reset, wiU ^^^^^^ implementation is Flash EPROM memory. 
initiaUze the subscriber terminal 40 and initiate the control 5 Therefore, the negative ^^f^h from block A30 will be^n a 

program of the control microprocessor 128 from the correct ^^^^^^^ calculation of the n^h EPROM memory, both 

-ru u ♦ 1 -J 1 J- mternal and external m block A34. If this checksum calcu- 

rl' t n.^'^^^^^^^^ H ^T'"" T!!?'' \u f ^'^^^ ^^^^^ft^l then in block A38 the system will start 

routine for the downloading of new control code either mto ^^^^ ^ p^ASH system start address, 
the internal non-volatile memory of the subscriber terminal . *u u i . . - r t ^ • i_. i ... 

40, such as Flash EPROM memory 134, the external 10 If. however, the checksi^ tes is failed m block A36. the 

memory on the expansion card 138, or both. The boot .""l^rrT I . ^ V.T^"^. 

program comprises an initialization and loading program '^""f^^^ downloaded. The miaroprocessor 128 will 

and several kernel routines. ^'^l''' ^^^^ f/*^^^^^ P^f, transactions with 

^ ^ .^^ ^ , which to reload the Flash EPROM, or other non-volatile 

The boot program wiU now be more fully explained by memory, of the memory space. This starts in block A40 by 

reference to its system level flow chart illustrated in FIGS. ^^^^^^ tuning the channel with downloadable pro- 

8A and 8R Upon mUialization or reset, the control micro- g,,^, information on it. Additionally, a communication 
processor 128 begins exccuUng mstructions at block AlO. In displayed in the LEDs of the subscriber terminal 40 

that block, the microprocessor 128 initializes all the input/ indicating that the terminal is downloading software, 

output ports of the devise so that it can communicate with purther, a communication to the secure microprocessor is 

the remainmg portions of the terminal. Next, in block A12 j^^de in block A44 to notify it of the present status, 

the MCC 104 IS mitialized to allow further commumcaUons Thereafter, in block A46 aU flash memory is erased and 

with and control of the other devices in the subscnber ^sted in block A48 to determine whether the erasure was 

lermmal 40. Additionally, the microprocessor 128 in block successful. If the erasure was not successful a loop is formed 

A14will cause the MCC 104 to provide initialization for the ^ ^ ^ erase the memory 

on screen display through the on screen display control 127. a i f /u i\ - \i. i rr^ • . . *u 

™ . ^ ^ Kl, . , , . A display of (E-1) m the LEDs mdicates that the 

The microprocessor 128 win then check to determine »f*^^^tJA Ji^c-..^^\f u * t„ ai 

. , , *^ . . , attempted erasure oi the memory has not been successful, 

whether the secure microprocessor 136 is ready to commu- ^„ ^^^^^ ^ successful, the program wiU fine tune 
nicate ant^ receive instructions. If the secure microprocessor frequency of the tuner 100 in block A52 f the channel 

136 IS not ready the microprocessor 128 wiU loop back to ^^^^^ downloadable program code transactions arc to 

the entry of block A16 untj .t receives an mdication that the ^ ^^^^^^ j^^,^^^ 

secure microprocessor has been initiahzed. ^j^, decrements the expected transactions count to 

After this indication is received, the program wiU begin a zero. In block A56 when the transaction count becomes zero, 

series of tests for its physical memory configuration. In theprogram wiU jump back to its starting point in block AlO, 

block A18 the program will test to determine whether there initialize the hardware, and start the control program at the 

is an expansion card 138 present. The test is performed by designated start address of the new configuration and control 

testing the state of the logic signal on port pin PAO of the program. 

microprocessor 128 which is tied to connector 200. If the piG. 9 is a detailed flow chart of the program code which 
expansion card is present, then the system parameters of the used to download the parameter transactions. This pro- 
device are set to external values to allow communication ^^^^ ^ode is executed by the contror microprocessor 128' 
with and control of the circuitry on the expansion card 138. ^e located in the downloadable memory space of 
If It IS determmed the expansion card is not present, then in ^^^^^^ ^he flow chart is exemplary only and many other 
block A22 the system parameters are set to internal values. programs to control the downloading of software 
With this task accomplished, the microprocessor 128 will ^ ^^^^^ f^^^ teachings of the invention. The 
then select and enable the memory a>nfiguration which it ^^^^rol microprocessor 128 enters this section of code in 
has detemuned is present m block A24. In block A26, it is y^^^^^ by recognizing an interrupt from the MCC 104 
determined whether there is external ROM present by ^^ich indicates that it has data, and possibly a transaction, 
checking the configuration parameters of the expansion card for the microprocessor. The control microprocessor 128 

loads the data, and recognizes it as a download parameters 

If there is external ROM present, then the control program 50 transaction in block A64. The data in the transaction is tested 

will start at the external ROM start address in block A28. to determine whether (in blodc A66) it has the correct kernel 

The external ROM start address was a parameter which was revision. If the kernel revisions do not match, then this 

stored when the system determined that external ROM was parameters transaction for downloading the code is not for 

present. If, however, internal memory is only ROM, then the. this microprocessor and the program exits. If the kernel 
system wiU start at the internal ROM start address in block 55 revisions do match, the program path flows through to block 

A32. A68 and a determination is made whether the program code 

This permits a facile method of selecting system opera- revisions match. If the code revisions match, that means that 
tion. If external ROM is present, this indicates external the code revision that the parameters transaction is attempt- 
programming and the subscriber terminal will begin execut- ing to download is already in the memory space of the 
ing code there to pass control to the subscriber terminal 40 60 control microprocessor 128. Therefore, the program exits, 
to the external module. Different plug-in modules can then If, on the other hand, the code revisions do not match then 
provide entirely new features and operations of subscriber the control microprocessor 128 will save the parameters 
terminal 40. Unplugging the module wiU cause failure of the from the transaction in the NVM of the secure micropro- 
test in block A26 and reversion to the internal software. If cessor 136 and the DRAM 137. Next, the microprocessor 
there is only internal ROM, this indicates there is no space 65 128 tests to determine whether or not the immediate flag is 
to download program code, and the rest of the boot program set in block A72. If the immediate flag is set, the system 
should not be used. operator has determined that downloading of the code 
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should take place at the same time that the parameters 
transaction is received. This will cause the subscriber ter- 
minal 40 to go into a downloading mode no matter what else 
the subscriber terminal is doing. If the immediate flag is set 
the checksum in the Flash memory is written incorrectly and 
the program then jumps to the reset address in block A78. By 
writing the checksum in the Flash memory incorrectly the 
system causes the boot program to start its loading program. 

The subscriber terminal 128 may, however, be engaged in 
an interactive session with the subscriber or may be doing 
something the subscriber does not wish to be interrupted, 
such as recording a premium event that he has paid for. 
Therefore, unless the subscriber terminal 128 needs to be 
downloaded immediately, it is more consumer friendly to 
allow the downloading to take place at the convenience of 
the subscriber. Thus, in block A72, if the immediate flag is 
not set, the program will flow to block A76 where a 
subscriber convenience flag is set before the program exits. 

The subscriber convenience flag is not checked until the 
subscriber terminal is in an off mode and then is tested with 
a block of program incorporated into the other off mode 
function routines. This block of code is more fully illustrated 
in FIG. 10. The program tests the consumer convenience flag 
in block A80 and if it is not set it processes the other off 
mode routines in block A82 before exiting. If the conve- 
nience flag is set, then in block A84 a message will be 
displayed to the subscriber indicating that "New software is 
available" and requesting "is it OK to update the software 

(this wiU take about minutes during which programming 

wiU not be available)?" Press UP for OK and DOWN for Not 
OK." The control microprocessor 128 will then wait for the 
subscriber key input in block A86, or after a timeout period, 
will accept the lack of a key input as an affirmative response 
and branch to either block A90 or block A94 depending upon 
the response. If the subscriber does not wish the subscriber 
terminal to be unavailable while the program code is being 
downloaded, then he will select no and then the program will 
exit in A94. The convenience flag is thereafter tested peri- 
odically to determine whether or not the downloading can 
take place. If, however, the subscriber indicates that it is 
alright to download software, the procedure in block A90 
writes an incorrect checksum in the Flash memory and resets 
in block A92. As discussed previously this will cause the 
downloading program of the boot program to activate and 
download the particular program code. 

la one preferred embodiment shown in FIGS. IIA and 
IIB, the external memory and the additional security feature 
may be provided by the expansion card 138 which mounts 
additional memory modules and/or an additional secure 
microprocessor on a printed circuit card. 

The expansion card 138 comprises a printed circuit card 
300 which has a casing 350 formed of a top housing 352 and 
a bottom housing 354. Each housing 352, 354 is molded 
from plastic and can be snap fitted together over tbe-PCB 
300. The printed circuit board 300 may mount the memory 
components and secure microprocessor on one or both sides. 
The board 300 preferably has a double naw (top and bottom) 
of finger like edge connection terminals 366. The expansion 
card 138 additionally has a protective door 364 which pivots 
about spring loaded hinges at 370. The protective door 364 
protects the bottom edge terminals of the board 300 while 
allowing a low profile. The protective door 364, shown in its 
open position in FIG. IIB, pivots out of the way when the 
expansion card 138 is inserted into a slot 304. The spring 
returns the door 364 to its protective position when the card 
is nsmoved. The casing 350 protects the circuit board 300 
from the environment and is sturdy enough to prevent 
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damage from most subscriber handling. The top housing 352 
is provided with inclined top surfaces which meet in a peak 
348 and a trough 368 to channel liquids away from the 
circuitry. 

5 The expansion card 138 fits into connector 200 electri- 
cally coupled to the expansion connector 200, The configu- 
ration is more fiilly shown in FIG. 12 where a printed circuit 
card 300 can be plugged into a connector 302 which is 
electrically coupled by a ribbon cable 304 to the expansion 
connector 200. The expansion card 138 is mounted in the 
subscriber terminal 40 by inserting it through a specially 
designed slot 304 of the terminal cover 400. The slot, 304, 
as illustrated in FIGS. 12 and 12A, is generally covered by 
an L-shaped snap on cover 401 until the expansion card 138 
is to be inserted. The slot 304 is an opening molded into the 
subscriber terminal casing 400 which allows access to the 
inside of the subscriber terminal 40 through the cover. The 
slot 304 has shoulder 406 which forms a step with a recess 
404. Because of the secure nature of the subscriber terminal 
40, it is better to provide an expansion card 138 that can be 

20 inserted into an internal connector such as 302 without 
having to remove the terminal cover 400. Further, the slot 
304 is made as narrow as possible for security and safety 
concerns. 

The expansion card 138 mounts in the subscriber terminal 

25 40 by sliding it into through the slot 304 in the side of the 
subscriber terminal cover 400 until it mates with connector 
302. The slot 304 has mounted within a carrier 410 with 
guides which direct the expansion card 138 toward the 
connector 302. As better seen in FIGS. 13A and 13B, the 

3Q carrier 410 is a folded metal stamping which is attached by 
screws to the connector 302. The guides 412 are formed by 
stamping and bending parts of the carrier 410 inward to 
produce tabs for centering of the expansion card 138 in the 
slot 304. The carrier 410 further has two tangs 380 which are 

35 stamped and bent up from its body. The tangs are at 
positioned at an incline so they catch door 364 just before its 
insertion into the connector 302. As the expansion card 138 
is inserted fiulher into the slot 304, the tangs 380 force the 
door 364 into its open position through a cutout in 386 in the 
floor of carrier 410. 

The upraised grip 362 abuts the shoulder 406 of the slot 
304 when the expansion card 138 is fully inserted as in seen 
in FIG. 12C. The shoulder 406 acts as a stop is to prevent 
excessive forces being applied and while inserting the card 

45 by providing positive feedback to the subscriber to indicate 
that a connection has been made. The grip 362 also provides 
visual clues to the subscriber because it is contoured to be 
flush with the subscriber terminal cover 400 when the 
expansion card 138 is correctly inserted. The finger hold 402 

50 on the shoulder 406 between the grip 362 and the recess 304 
encourages the subscriber to correctly position his hand 
when taking the expansion card 138 out. By providing him 
a convenient finger hold 402 and grip 362, the subscriber 
. generally pulls the card straight out and toward him instead 

55 of up which could damage the connector 302 and card 138. 
While there has been shown and described the preferred 
embodiments of the invention, it will be evident to those 
skilled in the art that various modifications may be made 
thereto without departing from the spirit and scope of the 

60 invention as set forth in the appended claims. 
What is claimed is: 

1. A method of downloading program code to change the 
control program for a computer in a subscriber terminal of 
a subscription television system, the method comprising the 
65 steps of: 

providing a memory in the subscriber terminal for storing 
the control program; 
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Storing in the memory a boot code program operative for 15. The reprogrammable subscriber terminal of claim 14, 

downloading new program code for at least a portion of wherein said information sources comprise channels in the 

the control program of the computer into the memory subscription television system. 

from a remote location, the control program operative 16. A reprogrammable subscriber terminal as set forth in 

for controlling predetermined features of the subscriber 5 claim 15, wherein said selecting component comprises: 

' . J . , a tuner for tuning to a television channel with download- 

acnvatine the boot code program m response to a prede- ui • r • * ^ • *i_ 1 ui 1 • 

f t~ f able mrormation inserted m the vertical blankine inter- 

termmcd condition; 1 ^ t • i_ t 

, , 1 r . . , val said television channel, 

operating the comcmter under control 01 the boot code it a ui t„ u * • 1 * *i. * 

*^ * J t J J r 17. A reprogrammable subscriber terminal as set forth m 

program to download the new program code from the ini-ie t, - ji*- 

subscription television system; and ""^^'"^ ^^^'^^^"g component compnses: 

storing the new program code in the memory. ^ '^"^"^ a television channel with download- 

2. The method of claim 1, wherein the boot code program ^^1® information inserted on the audio carrier of said 
is operative for receiving the new program code via a television channel. 

selected one of a plurality of channels of the subscription 18- A reprogrammable subscriber terminal as set forth in 

television system. ^ claim 11, wherein said processor is a microprocessor con- 

3. The method of claim 2, wherein the selected one of the tained on an integrated circuit and said first memory is a read 
plurality of channels in the subscription television system only memory internal to the integrated circuit, 
predetermined by a manager of the subscription television 19. A reprogrammable subscriber terminal as set forth in 
system. claim 11, wherein said second memory is at least one of 

4. The method of claim 2, wherein the selected one of the nji^ EPROM, and FLASH EPROM memory. 
pluraUty of channels in the subscription television system is 20. A reprogrammable subscriber terminal as set forth in 
tuned to by the subscriber terminal. claim U, wherein said second memory has at least a portion 

5. The method of claim 1, wherein the boot code program which is non-volatile 

is operative for receiving information related to the new 2I. A reprogrammable subscriber terminal as set forth in 

program code via a selected one of a plurahty of channels of 25 ^^^^ ^^^^^ ^^^^^ ^ downloaded with 

the subscription tek^^^^ program code which controls said processor. 

6. Ine method of claim 1, wherein the boot code program i^ a li i„ ^ * - 1 * r_ • 
is operative for tuning the subscriber terminal to one of a ^2. A reprogrammable subscnber terminal as set forth in 
plurahty of chamiels of the subscription television system to claim LI, whercm said second memory is Flash EPROM and 
download the new program code. 30 ^ ^'^'^^^ ^^^^^ P^S^^" 

7. The method of claim 1, wherein the predetermined ^ ^programmable subscnber terminal as set forth m 
condition comprises initialization of the subscriber terminal. ^laun 22, wherem said second memory has an mtemal 

8. The method of claim 1, wherein the predetermined portion and an external portion. 

condition comprises detection of a faUed memory checksum ^4. A reprogrammable subscriber terminal as set forth in 

test claim 23, wherein said external portion of said second 

9. The method of daira 1, wherein the predetermined memory is provided by plug-in card. 

features comprise on-screeo parameters. 25, The reprogrammable subscriber tenninal of claim U, 

10. The method of claim 1, wherein the predetermined wherein said boot program is executed in response to a 
features comprise subscriber interfaces. predetermined condition. 

- 11. A reprogrammable subscriber terminal for a subscrip- ^ 26. The reprogratnmable subscriber, terminal of claim 25, 

tion television system, comprising: wherein said predetermined condition comprises initializa- 

aproccssorforcontrolUngtheoperationofsaidsubscriber tion of the subscriber tenninal. 

tenninal, said processor including a first memory which ^7. The method of claun 25, wherem said predetermmed 

stores a boot program and a memory bus defining a condition comprises detection of a failed memory checksum 

memory space larger than said first memory; 45 ^ 

J . -J . . • . • 28. The reprogrammable subscnber terminal of claim 11, 

a second memory connected to said memory bus which is u • ^ j . • j r ^ 

A^a^^A i ^ f * - J wherein said predetermined feamres comprise on-screen 

denned m said memory space for stonng program code ^ ^ 

for the control program of said processor, said control ^^^Lf . , . , - 1 r i ■ -i^ 

program operative for controlUng predetermmed fea- ^9. The reprogrammable subscnber termmal of cUnm U. 

tures of ihrsubscriber terminal; Ind 50 ^rfa^f predetenmned features comprise subscriber 

said processor under regulation of said boot program "ao.Tmethodofdownloading program code to change the 

operauve tor downloading new program code from said ^^^j^^, ^^^^ 

in a selected set com- 

subscription television system mto said second prfsing one or more subscriber terminals in a subscriber base 

^ J^r^'^^' LI L * , ^ / . of a subscription television system, the" method comprising 

12. The reprogrammable subscnber terminal of claim 11, 55 r & 

wherein said subscription television system provides a pin- .. .. . . ^ 

rality of information sources to the tenninal. ptovrdmg a memory in each subscriber tennmal for 

13. The reprogrammable subscriber tenninal of claim 12, program; 

further comprising a component for providing over one of determining the selected set of subscnber terminals in the 

said plurality of infonnation sources a download program 60 subscriber base for receiving new program code for the 

code parameters transaction, said download code parameters control program; 

transaction including information identifying a selected one communicating to the subscriber base information that 

of said plurality of information sources on which said new allows each subscriber terminal in the subscriber base 

program code will be transmitted. to determine if it is a member of the selected set; 

14. The reprogrammable subscriber terminal of claim 12, 65 each subscriber terminal, in response to receipt of said 
further comprising a component for selecting at least one of information, determining if it is a memter of the 
said information sources. selected set; 
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in response lo determination by a particular subscriber 
terminal that it is a member of the selected set, oper- 
ating the computer associated with the particular sub- 
scriber terminal to download the new program code 
from the subscription television system; and 

storing the new program code in the memory of the 
particular subscriber terminal. 

31. The method of claim 30, wherein the step of com- 
municating to the subscriber base comprises transmitting 
addressing information in a selected channel of the subscrip- 
tion television system, and wherein the step of determining 
if a subscriber terminal is a member of the selected set 
comprises examining the addressing information to deter- 
mine if the particular subscriber terminal has been 
addressed. 

32. The method of claim 31, wherein the addressing 
information is provided in a download program code param- 
eters transaction. 

33. The method of claim 31, wherein the addressing 
information is directed to a particular subscriber terminal. 

34. The method of claim 31, wherein the addressing 
information is directed to a group of subscriber terminals. 

35. The method of claim 31, wherein the addressing 
information is globally directed to all of the subscriber 
terminals in the subscription television system, 

36. A method of downloading program code to change the 
control program for the computer of the subscriber terminals 
in a sutecriber base of a subscription television system, the 
method comprising the steps of: 

providing a memory in each subscriber terminal for 
storing the control program; 

globally transmitting the new program code to each 
subscriber terminal in the subscriber base, together 
with information identifying the new program code as 
globally transmitted; 

at the subscriber terminal, determining that the new 
program code is globally transmitted; 

in response to determination by a subscriber terminal that 

. the new program code is globally transmitted, operat- 
ing the computer associated with the subscriber termi- 
nal to download the new program code from the 
subscription television system; and 

storing the new program code in the memory of the 
particular subscriber terminal. 

37. A method of downloading program code to change the 
control program for a computer in a subscriber terminal of 
a subscription television system, the method comprising the 
steps of: 

providing a memory in the subscriber terminal for storing 
the control program, the control program including at 
least a kernel routing associated with a particular model 
of computer utiUzed in the subscriber terminal; 

storing a kernel identifier corresponding to the kernel 
routine; 

storing in the memory a download routine operative for 
downloading new program code for at least a portion of 
the control program of the computer into the memory 
from a remote location; 

receiving a kernel revision identifying information from 
the subscription television system at the subscriber 
terminal; 

at the subscriber terminal, comparing the kernel revision 
identifying information with the stored kernel identi- 
fier; 

in response to a match between the kernel revision 
identifying information and the stored kernel identifier. 
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Operating the computer under control of the download 
routine to download the new program code from the 
subscription television system; and 
storing the new program code in the memory. 
5 38. The method of claim 37, wherein the kernel revision 
identifying information is provided in a download program 
code parameters transaction provided on the subscription 
television system. 

39. A method of downloading program code to change the 
10 control program for a computer in a subscriber terminal of 

a subscription television system, the method comprising the 
steps of: 

providing a memory in the subscriber terminal for storing 
the control program; 

storing a code identifier corresponding to the version of 
the control program stored in the memory; 

storing in the memory a download routine operative for 
downloading new program code for at least a portion of 
2Q the control program of the computer into the memory 
from a remote location; 

receiving code revision identifying information from the 
subscription television system at the subscriber termi- 
nal; 

25 at the subscriber terminal, comparing the code revision 
identifying information with the stored code identifier; 
in response to a match between the code revision identi- 
fying information and the stored code identifier, oper- 
ating the computer under control of the download 
30 routine to download the new program code from the 
subscription television system; and 
storing the new program code in the memory. 

40. The method of claim 39, wherein the code revision 
identifying information is provided in a download program 
code parameters transaction provided on the subscription 
television system. 

41. A method of downloading program code to change the 
control program for a computer in a subscriber terminal of 
a subscription television system, the method comprising the 

^ steps of: 

providing a memory in the subscriber terminal for storing 

the control program; 
storing in the memory of a download routine operative for 
downloading new program code for at least a portion of 
the control program of the computer into the memory 
from a remote location; 
transmitting a download immediate command to the sub- 
scriber terminal; 
50 in response to receipt of the download immediate 
command, operating the computer under control of the 
download routine to download the new program code 
from the subscription television system; and 
storing the new program code in the memory. 
55 42. The method of claim 41, wherein the download 
immediate command is indicated by the state of an imme- 
diate flag provided in a download program code parameters 
transaction. 

43. The method of claim 42, wherein a first state of the 
60 immediate flag indicates that the new program code should 

be downloaded immediately, and wherein a second state of 
the immediate flag indicates that the new program code 
should be downloaded at a later time. 

44. A method of downloading program code to change the 
65 control program for a computer in a subscriber terminal of 

a subscription television system, the method comprising the 
steps of: 
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providing a memory in the subscriber terminal for storing 
the control program; 

storing in the memory a download routine operative for 
downloading new program code for at least a portion of 
the control program of the computer into the memory 
from a remote location; 

providing a subscriber convenience flag in the subscriber 
terminal indicative that the subscriber terminal is pref- 
erably not to be interrupted with a download operation; 

when the subscriber terminal is in an off mode, checking 
the state of the subscriber convenience flag; 

in response to the subscriber convenience flag being in a 
predetermined first state, displaying a message on a 
display associated with the subscriber terminal indica- 
tive that new program code is available for download- 
ing; 

in response to a first predetermined condition, operating 
the computer under control of the download routine to 
download the new program code from the subscription 
television system; 
storing the new program code in the memory; and 
in response to a second predetermined condition, post- 
poning the downloading of the new program code. 

45. The method of claim 44, wherein the first predeter- 
mined condition comprises an input from a user of the 
subscriber terminal granting permission to download the 
new program code. 

46. The method of claim 44, wherein the first predeter- 
mined condition comprises the expiration of a predeter- 
mined timeout period. 

47. The method of claim 44, wherein the second prede- 
termined condition comprises an input from a user of the 
subscriber terminal refusing permission to download the 
new program code. 
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48. A method of downloading program code to change the 
control program for a computer in a subscriber terminal of 
a subscription television system, the method comprising the 
steps of: 

providing a memory in the subscriber terminal for storing 
the control program; 

storing a kernel identifier identifying a particular model of 
computer utilized in the subscriber terminal; 

storing in the memory a download routine operative for 
downloading new program code for at least a portion of 
the control program of the computer into the memory 
from a remote location; 

transmitting plural versions of the new program code 
simultaneously in the subscription television system on 
a corresponding plurality of channels; 

receiving kernel revision identifying information from the 
subscription television system at the subscriber termi- 
nal; 

at the subscriber terminal, examining the kernel revision 
identifying information to determine which particular 
one of the plurality of channels is transmitting the new 
program code associated with the stored kernel identi- 
fier; 

operating the computer under control of the download 
routine to download the new program code for a 
particular model of computer utilized in the subscriber 
terminal from the particular one of the plurality of 
channels; and 

storing the new program code in the memory. 

49. The method of claim 48, wherein the kernel revision 
identifying information is provided in a download program 
code parameters transaction provided on the subscription 
television system. 
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